Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
File: AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json)
Hash identifier: kOMyE9q2z9hJxsqTouBrIMDR3pv5G8o9c45v4kHKa44=
Subject key identifier: 59:50:07:5B:B6:F6:C6:05:A9:59:60:06:DD:DF:19:9B:86:A6:D5:2F
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 01A0C7B36C70FDC6C64D657C7031E332508F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
Manifest number: 1AA7
Signing time: Tue 22 Sep 2026 06:00:19 +0000
Manifest this update: Tue 22 Sep 2026 06:00:19 +0000
Manifest next update: Wed 23 Sep 2026 06:00:19 +0000
Files and hashes: 1: 36GKnzSqhN4_oe_od7EzbcUMBWk.roa (hash: DblUfBZxj6qDRnY1ULDXQyaYP2XoY2ejpJAZE7T4oSU=)
2: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: mOIAfhU61lpgz1uI6zVi7MEH8CnM/G5obwvmOIhEOLQ=)
3: IrT1izJjsi0TfCcq2lqIbiIQJHI.roa (hash: XIoNtYAb0+rc5ayEFBobv3HeFMAQ6TE3neU0MVac3gs=)
4: nhnAoI7njIH6xYxCA5fwfo4HPKU.roa (hash: Cy5nsxKi/IjoTCyLrXrDmFreBrmeghR5fR9TOP9/eoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:6c:70:fd:c6:c6:4d:65:7c:70:31:e3:32:50:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Sep 22 06:00:19 2026 GMT
Not After : Sep 23 06:00:19 2026 GMT
Subject: CN=5950075bb6f6c605a9596006dddf199b86a6d52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fd:9c:a5:99:1f:4e:46:9d:cf:1f:14:2e:be:
08:87:ef:85:da:99:0c:5a:ef:af:97:b1:83:48:b8:
9a:b4:2d:3b:4c:08:c8:e1:91:9e:37:02:0c:59:8e:
e7:86:63:ad:8b:1f:54:d4:44:5d:2e:29:a5:33:0a:
01:07:83:e3:13:30:22:51:5f:2b:43:2c:79:58:16:
bc:61:e1:fd:9e:82:b1:6a:b0:5c:61:9d:87:63:a5:
44:26:76:86:f8:ec:92:2b:20:06:82:80:06:b2:68:
f0:31:61:fa:0d:42:36:e5:f2:01:38:5f:89:ba:0b:
c7:01:e2:b8:61:bd:29:67:47:c8:71:c3:da:03:a0:
61:fc:b9:1d:de:a0:df:fa:86:76:7e:4c:6a:b9:2b:
44:fb:8e:c7:94:9c:32:3d:be:ff:de:d2:6b:42:eb:
e7:2a:ef:ba:a4:30:cd:36:e7:27:2a:30:4b:88:f1:
53:eb:96:10:b9:3a:50:fb:16:22:c6:61:e6:6e:4a:
aa:f6:87:3f:fb:4c:dc:ba:98:19:ed:48:39:2d:28:
f1:74:48:a2:6b:e0:90:7c:76:d2:ed:f9:ba:81:98:
1b:2a:c0:d9:65:d6:48:88:d8:e0:ff:b3:24:6e:d2:
7a:d4:5c:a8:8a:99:72:70:e0:8a:90:f4:b6:1c:d8:
ed:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:50:07:5B:B6:F6:C6:05:A9:59:60:06:DD:DF:19:9B:86:A6:D5:2F
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d0:08:f8:4f:78:ef:eb:02:44:59:04:59:05:88:d1:c1:d2:
d5:c2:1b:33:44:99:a4:68:1d:9b:5a:de:cf:72:98:c1:96:0c:
a6:26:7c:dc:26:5e:25:13:5a:1e:40:b0:5d:ad:ea:4f:a2:a6:
a7:9a:a7:2d:48:12:41:75:82:82:b4:62:86:84:58:b2:e0:77:
81:c1:3e:be:14:38:9e:00:8f:6d:ab:50:9c:d3:3f:8a:bc:8a:
f2:5e:d4:b8:aa:9d:45:58:1f:9e:21:07:9d:a0:58:ee:02:e0:
8f:21:92:c5:c7:16:83:4a:a4:20:11:76:94:a0:ec:62:e3:67:
0f:7f:ad:83:f7:d5:1a:4b:fe:46:b1:d9:c6:aa:6e:c4:d0:f5:
08:77:11:3b:82:54:da:7e:58:27:c1:01:f5:82:44:06:fe:ad:
5c:eb:36:30:e5:02:da:2a:5e:0e:3b:d1:ed:0a:95:5f:b8:80:
0a:14:31:48:4f:96:62:41:45:aa:91:24:de:4e:82:69:4f:7a:
7c:e0:a5:55:03:0e:2e:2f:22:e9:77:b3:cd:bb:51:05:5e:e1:
0a:1a:45:98:51:92:8c:56:44:84:aa:4c:99:09:19:76:5a:7c:
96:53:a7:e2:7d:b1:63:d0:5b:a2:64:a7:53:27:ea:0d:c7:f8:
ea:35:ed:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:08:45 2026 by rpki-client